Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WvLyiu6pexK_I-jAwBVzBm2iH-U.roa
File:                     WvLyiu6pexK_I-jAwBVzBm2iH-U.roa (raw, json)
Hash identifier:          JICn9gf4lfpp6ffuBv7K5jMmNe0KX1afTkzEsS6OlTg=
Subject key identifier:   5A:F2:F2:8A:EE:A9:7B:12:BF:23:E8:C0:C0:15:73:06:6D:A2:1F:E5
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0189D8E514DA4BFA9023435DB189A6B77E70
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WvLyiu6pexK_I-jAwBVzBm2iH-U.roa
Signing time:             Wed 09 Aug 2023 06:03:59 +0000
ROA not before:           Wed 09 Aug 2023 06:03:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        194.87.192.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d8:e5:14:da:4b:fa:90:23:43:5d:b1:89:a6:b7:7e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Aug  9 06:03:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5af2f28aeea97b12bf23e8c0c01573066da21fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:fc:4a:b5:bf:7f:e6:61:ae:d8:73:df:07:
                    8f:56:6c:06:21:1d:7a:ec:d8:df:c1:c5:e8:65:4e:
                    27:1f:49:25:79:51:4c:6b:0e:74:8b:bc:2b:06:46:
                    26:22:04:44:55:e7:9a:db:e4:18:57:f0:90:e2:41:
                    06:53:d7:75:f8:52:8d:6f:c8:62:ee:30:2e:90:46:
                    ed:0d:e3:b8:8b:4a:fa:b1:78:1e:4b:c2:d0:ce:3f:
                    6a:8e:4f:0a:ec:d1:a0:b1:24:fb:2e:33:27:a1:37:
                    05:7f:8e:4a:c7:f4:20:13:e9:c7:b6:49:c0:f4:41:
                    4c:64:3f:5f:ac:24:23:ec:65:89:66:ca:47:31:58:
                    00:56:19:c8:9b:bc:e2:cc:09:ad:be:d4:0e:5e:9a:
                    3a:3b:85:d9:ce:bb:c5:d9:35:9a:27:cf:86:cf:40:
                    b2:1d:2c:7a:af:6a:59:4c:46:85:46:44:f6:64:94:
                    d7:86:55:b7:46:13:10:f4:2e:8e:2d:b8:e6:1d:dd:
                    81:3b:d1:b5:98:93:fc:45:4e:da:2d:8b:35:72:03:
                    f9:6d:c3:d3:fc:87:a8:0a:82:e2:47:4d:6b:72:fd:
                    1a:68:c0:40:20:e2:13:ea:0c:52:ee:28:75:7b:61:
                    cd:f7:7c:68:34:89:ac:ae:df:63:fd:44:05:12:35:
                    7a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F2:F2:8A:EE:A9:7B:12:BF:23:E8:C0:C0:15:73:06:6D:A2:1F:E5
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WvLyiu6pexK_I-jAwBVzBm2iH-U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:a0:58:36:8b:5d:95:67:ed:7e:33:9d:74:cb:66:e7:dd:b7:
         32:ca:46:4c:82:34:03:23:5e:53:89:50:46:3e:75:db:58:f5:
         4e:d6:73:12:8a:f5:e7:23:bf:e3:10:51:93:3f:41:dd:40:a5:
         71:5a:49:d3:7f:95:e3:03:7b:bb:50:68:e6:51:81:81:76:2c:
         77:46:f6:e7:a9:73:26:a8:30:3b:aa:7d:e4:9d:0d:b2:6a:37:
         ea:8a:be:7b:ab:ab:41:12:a7:3a:f0:bb:75:72:a2:90:97:f0:
         16:69:d3:81:a0:3f:9d:42:c3:96:0a:56:37:1a:89:7a:23:9d:
         d8:9b:eb:64:a8:25:c8:46:e0:c0:79:66:35:ae:d2:9b:02:40:
         f2:ea:47:0b:aa:c5:dd:2d:88:3c:e8:87:e1:84:6d:78:26:ea:
         40:39:65:17:53:b1:b3:d9:f4:f1:13:f0:79:cf:cc:80:8b:a0:
         e1:62:39:b0:a4:77:73:c3:10:7b:af:9b:02:50:d3:ee:e0:6d:
         98:68:21:d6:94:41:d7:d2:d7:03:51:12:fc:7d:26:22:b0:70:
         4f:ca:33:54:9f:a4:8f:43:05:f4:83:83:c5:26:e8:21:59:63:
         91:a2:a0:fb:b9:75:6f:fd:97:fa:3b:0a:85:6c:e1:50:4d:82:
         31:9f:a3:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnY5RTaS/qQI0NdsYmmt35wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwODA5MDYwMzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWYyZjI4YWVlYTk3YjEyYmYyM2U4YzBjMDE1NzMwNjZkYTIxZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTv8SrW/f+Zhrthz3wePVmwGIR16
7NjfwcXoZU4nH0kleVFMaw50i7wrBkYmIgREVeea2+QYV/CQ4kEGU9d1+FKNb8hi
7jAukEbtDeO4i0r6sXgeS8LQzj9qjk8K7NGgsST7LjMnoTcFf45Kx/QgE+nHtknA
9EFMZD9frCQj7GWJZspHMVgAVhnIm7zizAmtvtQOXpo6O4XZzrvF2TWaJ8+Gz0Cy
HSx6r2pZTEaFRkT2ZJTXhlW3RhMQ9C6OLbjmHd2BO9G1mJP8RU7aLYs1cgP5bcPT
/IeoCoLiR01rcv0aaMBAIOIT6gxS7ih1e2HN93xoNImsrt9j/UQFEjV6zwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFry8oruqXsSvyPowMAVcwZtoh/lMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvV3ZMeWl1NnBleEtfSS1qQXdCVnpCbTJpSC1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwlfAMA0G
CSqGSIb3DQEBCwUAA4IBAQB9oFg2i12VZ+1+M510y2bn3bcyykZMgjQDI15TiVBG
PnXbWPVO1nMSivXnI7/jEFGTP0HdQKVxWknTf5XjA3u7UGjmUYGBdix3RvbnqXMm
qDA7qn3knQ2yajfqir57q6tBEqc68Lt1cqKQl/AWadOBoD+dQsOWClY3Gol6I53Y
m+tkqCXIRuDAeWY1rtKbAkDy6kcLqsXdLYg86IfhhG14JupAOWUXU7Gz2fTxE/B5
z8yAi6DhYjmwpHdzwxB7r5sCUNPu4G2YaCHWlEHX0tcDURL8fSYisHBPyjNUn6SP
QwX0g4PFJughWWORoqD7uXVv/Zf6OwqFbOFQTYIxn6PW
-----END CERTIFICATE-----